Classic security foible at a local Subway sandwich shop

As I stood there at the cash register (a PC running POS software), I noticed an upturned napkin with some writing on it. I couldn’t believe that someone (probably the manager) had written down not only the username and password (clearly marked with labels USERNAME and PASSWORD) but also the site those credentials were used at. Of course a napkin with random letters and numbers on it would probably be construed as some kind of account information, but to clearly label them as such, along with the site they are used at… its like drawing a map for hungry walk-up hackers.

Of course I took a picture with my trusty camera phone, saying “oh man, this thing is so touchy, it’s always taking pictures of my feet” as the cashier looked up at me after hearing the shutter noise it makes.